Bug #20210: fe_login: Forgot Password should not send passwords if they are hashed (md5) - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #20210

closed

fe_login: Forgot Password should not send passwords if they are hashed (md5)

Added by Nabil Sayegh about 15 years ago. Updated over 12 years ago.

Status:

Closed

Priority:

Should have

Assignee:

Category:

Target version:

Start date:

2009-03-19

Due date:

% Done:

Estimated time:

TYPO3 Version:

4.2

PHP Version:

5.2

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

With md5 passwords it's impossible to send the user the cleartext password.
I suggest a "reset password" functionality instead.

Later I'll add a patch that implementes this.
(issue imported from #M10729)

Related issues 3 (0 open — 3 closed)

Actions

Copy link

Updated by Nabil Sayegh about 15 years ago

kb_md5fepw works fine with recent typo3 4.2.6 and php5 and supports password resetting. However, you have to override the dependencies when installing it.

Actions

Copy link

Updated by Steffen Gebert almost 14 years ago

The felogin version shipped with TYPO3 4.3 doesn't send new passwords, but creates a link to reset the password. This IIRC also works with saltedpasswords.

So I think this is fixed - do you agree?

Actions

Copy link